CVE-2026-20982

CVSS Score & Metrics

Base Score

6.0 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L                                    

Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege.

Published Date

February 04, 2026

Last Modified

February 05, 2026

CWE ID

CWE-22

Source

NVD

Vendor

Samsung Mobile

Product

Samsung Mobile Devices